From: Kevin McCarthy <kevin@8t8.us>
Date: Fri, 13 Jul 2018 04:41:17 +0000 (-0700)
Subject: Fix buffer size check in cmd_parse_lsub.
X-Git-Tag: mutt-1-10-1-rel~9
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4d0cd26516edf5afa5222f2148a96f456eb16f0a;p=mutt

Fix buffer size check in cmd_parse_lsub.

The size parameter to url_ciss_tostring() was off by one.
---

diff --git a/imap/command.c b/imap/command.c
index c79d4f28..82bf54c4 100644
--- a/imap/command.c
+++ b/imap/command.c
@@ -849,7 +849,7 @@ static void cmd_parse_lsub (IMAP_DATA* idata, char* s)
   url.path[strlen(url.path) - 1] = '\0';
   if (!mutt_strcmp (url.user, ImapUser))
     url.user = NULL;
-  url_ciss_tostring (&url, buf + 11, sizeof (buf) - 10, 0);
+  url_ciss_tostring (&url, buf + 11, sizeof (buf) - 11, 0);
   safe_strcat (buf, sizeof (buf), "\"");
   mutt_buffer_init (&token);
   mutt_buffer_init (&err);